Google TAG Disrupted 10K DRAGONBRIDGE Influence Ops in Q1 2025

Executive Summary

Google's Threat Analysis Group (TAG) disrupted over 10,000 instances of DRAGONBRIDGE influence operations during the first quarter of 2025, making it the most prolific information operations (IO) actor the team currently tracks. According to a TAG blog post published today, DRAGONBRIDGE — a China-linked network — continues to target geopolitical flashpoints including US elections, the Ukraine war, and US-China relations across Google platforms such as YouTube, Gmail, and Blogger.

Technical Analysis

TAG's Q1 2025 takedown data shows DRAGONBRIDGE activity dwarfing other tracked IO actors in volume. The group operates a sprawling infrastructure of fake personas, coordinated content farms, and cross-platform amplification networks. TAG analysts observed DRAGONBRIDGE using AI-generated imagery and text to create credible-looking personas that engage in comment sections, publish blog posts, and seed divisive narratives.

Key campaigns disrupted this quarter include efforts to amplify anti-Ukraine sentiment ahead of European elections, sow discord around US-China trade negotiations, and promote narratives favorable to Chinese government positions on Taiwan. TAG notes that DRAGONBRIDGE has adapted to platform enforcement by rotating domains, repurposing compromised accounts, and using URL shorteners to evade detection.

The group's operational security remains inconsistent — TAG identified shared infrastructure across multiple campaign clusters, including overlapping IP ranges and reused email registration patterns. This allowed TAG to attribute disparate campaigns to the same actor despite varied thematic content.

Mitigations & Recommendations

Platform operators should monitor for coordinated inauthentic behavior patterns including rapid account creation from shared IP ranges, cross-posting of identical content, and accounts that exclusively engage with political or geopolitical topics. TAG recommends that researchers share cross-platform signals through industry threat-sharing groups to improve detection of DRAGONBRIDGE's evolving infrastructure. For general users, TAG advises skepticism toward accounts with limited posting history that push emotionally charged narratives on current events.